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IN THE CLAIMS : 

1. (Original) A cipher strength evaluation apparatus for evaluating strength on 
ciphertext obtained by an encryption apparatus having a plurality of steps of accepting unstirred 
text, stirring with an extended key calculated from a user key based on a key schedule, and 
outputting stirred text for encrypting plaintext step by step, the cipher strength evaluation 
apparatus comprising: 

a key relationship information storing part for storing key relationship information 
determined by the key schedule and showing a relationship between a segment bit pattern of the 
user key and a segment bit pattern of the extended key thereof; 

an estimated key information storing part for storing estimated key information 
about an estimated extended key estimated as equal to the extended key and an estimated user 
key estimated as equal to the user key; and 

an estimated unstirred text calculating part for calculating estimated unstirred text 
estimated as equal to unstirred text at a certain stirring step based on ciphertext or estimated 
stirred text estimated as equal to stirred text at that stirring step, 

wherein the estimated unstirred text calculating part includes: 

an estimated extended key calculating part for calculating an estimated extended 
key based on the key relationship information stored in the key relationship information storing 
part and the estimated key information stored in the estimated key information storing part and 
storing the estimated extended key in the estimated key information storing part, and 

an estimated unstirred text calculating part main body for calculating estimated 
unstirred text based on ciphertext or the estimated stirred text, and the estimated extended key. 
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2. (Original) A cipher strength evaluation apparatus for evaluating strength on 
ciphertext obtained by an encryption apparatus having a plurality of steps of accepting unstirred 
text, stirring with an extended key calculated from a user key based on a key schedule, and 
outputting stirred text for encrypting plaintext step by step, the cipher strength evaluation 
5 apparatus comprising: 

a key relationship information storing part for storing key relationship information 
determined by the key schedule and showing a relationship between a segment bit pattern of the 
user key and a segment bit pattern of the extended key thereof; 

an estimated key information storing part for storing estimated key information 
10 about an estimated extended key estimated as equal to the extended key and an estimated user 
key estimated as equal to the user key; and 

an estimated unstirred text calculating part for calculating estimated unstirred text 
estimated as equal to unstirred text at a certain step based on ciphertext or estimated stirred text 
estimated as equal to stirred text at that step, 
1 5 wherein the estimated unstirred text calculating part includes: 

an estimated extended key calculating part for calculating the estimated extended 
key by exhaustive search based on a probabilistic relationship probabilistically held between 
keys contained in the key relationship information stored in the key relationship information 
storing part and the estimated key information stored in the estimated key information storing 
20 part and storing it in the estimated key information storing part, and 

an estimated unstirred text calculating part main body for calculating estimated 
unstirred text based on ciphertext or the estimated stirred text, and the estimated extended key. 
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3. (Original) A cipher strength evaluation apparatus for evaluating strength on 
ciphertext obtained by an encryption apparatus having a plurality of steps of accepting unstirred 
text, stirring with an extended key calculated from a user key based on a key schedule, and 
outputting stirred text for encrypting plaintext step by step, the cipher strength evaluation 
5 apparatus comprising: 

a key relationship information storing part for storing key relationship information 
determined by the key schedule and showing a relationship between a segment bit pattern of the 
user key and a segment bit pattern of the extended key thereof; 

an estimated key information storing part for storing estimated key information 
10 about an estimated extended key estimated as equal to the extended key and an estimated user 
key estimated as equal to the user key; and 

an estimated unstirred text calculating part for calculating estimated unstirred text 
estimated as equal to unstirred text at a certain step based on ciphertext or estimated stirred text 
estimated as equal to stirred text at that step, 
1 5 wherein the estimated unstirred text calculating part includes: 

an estimated extended key calculating part for calculating an estimated extended 
key by an algebraic technique based on ciphertext or estimated stirred text, plaintext or estimated 
unstirred text, a deterministic relationship deterministically held between keys contained in the 
key relationship information stored in the key related information storing part, and the estimated 
20 key information stored in the estimated key information storing part, and storing the estimated 
extended key in the key information storing part, and 
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an estimated unstirred text calculating part main body for calculating estimated 
unstirred text estimated as equal to unstirred text based on ciphertext or the estimated stirred 
text, and the estimated extended key. 

4. (Original) A cipher strength evaluation apparatus for evaluating strength on 
ciphertext obtained by an encryption apparatus having a plurality of steps of accepting unstirred 
text, stirring with an extended key calculated from a user key based on a key schedule, and 
outputting stirred text for encrypting plaintext step by step, the cipher strength evaluation 
5 apparatus comprising: 

a key relationship information storing part for storing key relationship information 
determined by the key schedule and showing a relationship between a segment bit pattern of the 
user key and a segment bit pattern of the extended key thereof; 

an estimated key information storing part for storing estimated key information 
10 about an estimated extended key estimated as equal to the extended key and an estimated user 
key estimated as equal to the user key; and 

an estimated unstirred text calculating part for calculating estimated unstirred text 
estimated as equal to unstirred text at a certain step based on ciphertext or estimated stirred text 
estimated as equal to stirred text at that step, and a second estimated extended key calculating 
1 5 part for calculating an estimated extended key at a certain step, 

wherein the estimated unstirred text calculating part includes: 
a first estimated extended key calculating part for calculating the estimated 
extended key by exhaustive search based on the estimated key information stored in the 
estimated key information storing part and storing it in the estimated key information storing 
20 part, and 
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an estimated unstirred text calculating part main body for calculating estimated 
unstirred text estimated as equal to unstirred text based on ciphertext or estimated stirred text, 
and the estimated extended key, and 

the second estimated extended key calculating part for calculating an estimated 
25 extended key by an algebraic technique based on estimated stirred text, plaintext or estimated 
unstirred text, a deterministic relationship deterministically held between keys contained in the 
key relationship information stored in the key related information storing part, and the estimated 
key information stored in the estimated key information storing part, and storing the estimated 
extended key in the key information storing part. 

5. (Original) A cipher strength evaluation apparatus for evaluating strength on 
ciphertext obtained by an encryption apparatus having a plurality of steps of accepting unstirred 
text, stirring with an extended key calculated from a user key based on a key schedule, and 
outputting stirred text for encrypting plaintext step by step, the cipher strength evaluation 
5 apparatus comprising: 

a key relationship information storing part for storing key relationship information 
determined by the key schedule and showing a relationship between a segment bit pattern of the 
user key and a segment bit pattern of the extended key thereof; 

an estimated key information storing part for storing estimated key information 
10 about an estimated extended key estimated as equal to the extended key and an estimated user 
key estimated as equal to the user key; and 

an extended key calculating condition evaluation part for outputting cost 
information about a calculation resource or complexity required for calculating an estimated 
extended key based on the key relationship information stored in the key relationship 
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15 information storing part and the estimated key information stored in the estimated key 
information storing part. 

6. (Original) A cipher strength evaluation apparatus for evaluating strength on 
ciphertext obtained by an encryption apparatus having a plurality of steps of accepting unstirred 
text, stirring with an extended key calculated from a user key based on a key schedule, and 
outputting stirred text for encrypting plaintext step by step, the cipher strength evaluation 

5 apparatus comprising: 

a key relationship information storing part for storing key relationship information 
determined by the key schedule and showing a relationship between a segment bit pattern of the 
user key and a segment bit pattern of the extended key thereof; 

an estimated key information storing part for storing estimated key information 
10 about an estimated extended key estimated as equal to the extended key and an estimated user 
key estimated as equal to the user key; and 

an extended key calculating condition evaluation part for outputting cost 
information about a calculation resource or complexity required for calculating the estimated 
extended key by exhaustive search based on a probabilistic relationship probabilistically held 
15 between keys contained in the key relationship information stored in the key relationship 
information storing part and the estimated key information stored in the estimated key 
information storing part. 

7. (Original) A cipher strength evaluation apparatus for evaluating strength on 
ciphertext obtained by an encryption apparatus having a plurality of steps of accepting unstirred 
text, stirring with an extended key calculated from a user key based on a key schedule, and 
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outputting stirred text for encrypting plaintext step by step, the cipher strength evaluation 
5 apparatus comprising: 

a key relationship information storing part for storing key relationship information 
determined by the key schedule and showing a relationship between a segment bit pattern of the 
user key and a segment bit pattern of the extended key thereof; 

an estimated key information storing part for storing estimated key information 
10 about an estimated extended key estimated as equal to the extended key and an estimated user 
key estimated as equal to the user key; and 

an extended key calculating condition evaluation part for outputting cost 
information about a calculation resource or complexity required for calculating an estimated 
extended key by an algebraic technique based on ciphertext or estimated stirred text, plaintext or 
15 estimated unstirred text, a deterministic relationship deterministically held between keys 
contained in the key relationship information stored in the key related information storing part, 
and the estimated key information stored in the estimated key information storing part. 

8. (Original) A cipher strength evaluation apparatus for evaluating strength on 
ciphertext obtained by an encryption apparatus having a plurality of steps of accepting unstirred 
text, stirring with an extended key calculated from a user key based on a key schedule, and 
outputting stirred text for encrypting plaintext step by step, the cipher strength evaluation 
5 apparatus comprising: 

a key relationship information storing part for storing key relationship information 
determined by the key schedule and showing a relationship between a segment bit pattern of the 
user key and a segment bit pattern of the extended key thereof; 



4352 1 . 1 700\LINE\IRV\54 1 9 1 5.2 



Patent 
43521-1700 

an estimated key information storing part for storing estimated key information 
1 0 about an estimated extended key estimated as equal to the extended key and an estimated user 
key estimated as equal to the user key; and 

an estimated unstirred text calculating part for calculating estimated unstirred text 
estimated as equal to unstirred text at a certain step based on ciphertext or estimated stirred text 
estimated as equal to stirred text at that step, and an extended key calculating condition 
1 5 evaluation part for calculating cost information required for calculating an extended key, 
wherein the estimated unstirred text calculating part includes: 
an estimated extended key calculating part for calculating the estimated extended 
key by exhaustive search based on the estimated key information stored in the estimated key 
information storing part and storing it in the estimated key information storing part, and 
20 an estimated unstirred text calculating part main body for calculating estimated 

unstirred text estimated as equal to unstirred text based on ciphertext or estimated stirred text, 
and the estimated extended key, and 

the extended key calculating condition evaluation part outputs cost information 
about a calculation resource or complexity required for calculating an estimated extended key by 
25 an algebraic technique based on estimated stirred text, plaintext or estimated unstirred text, a 
deterministic relationship deterministically held between keys contained in the key relationship 
information stored in the key related information storing part, and the estimated key information 
stored in the estimated key information storing part. 

9. (Original) A weak key detector used along with an encryption apparatus having a 
key schedule part for calculating an extended key from a user key for detecting a weak key that 
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is one kind of a user key to lower difficulty in decrypting ciphertext obtained by the encryption 
apparatus, the weak key detector comprising: 
5 a weak key information storing part for storing segment bit patterns of the user 

key and the extended key forming a weak key condition satisfied by the weak key as weak key 
information; and 

a determining part for accepting a user key to determine whether the user key is a 
weak key based on the weak key information, 
1 0 wherein the determining part includes: 

a key schedule part for calculating the extended key from the user key, as similar 
to that provided for the encryption apparatus, and 

a determining part main body for determining whether the user key and the 
extended key satisfy the weak key condition to output a detection signal indicating a result. 
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